The session ids are also hashed when stored or loo...

# server

[andrewoma]

The session ids are also hashed when stored or looked up from something like redis to prevent extracting of session ids and spoofing of sessions